be9c1cc920faa941931151a0b540c2c97801b257554fed88e01bf045aaa25e4a

Sharing

Copy URL Twitter E-mail

General

Target
be9c1cc920faa941931151a0b540c2c97801b257554fed88e01bf045aaa25e4a
Size 6.4MB
Sample260710-m8246sa181
SHA256 be9c1cc920faa941931151a0b540c2c97801b257554fed88e01bf045aaa25e4a
MD5 a1dc618824ac4844ee8a4b3070742878
SHA1 4ea80e3fbf1d2f4141c9468c0c10a9d6b6449249
SHA512 4820e5132f73eccf26604b53b9c1750da00d62ef7806b84ed70d73b77da22c629e72bcd3b6a0ac68189c50a0983eeecae294dbbbcc3466b7655d41a24a35c906
SSDEEP 98304:JUws86vJkSfT5PhHtYbUDyrhe632vspERaM3Kw:Cv86X5Hyf2vs6RaAK
TLSH
T157669F23B341943FC11B07358967C6742535AE602B3A9A3767F87D1E3F7A281392E687
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be9c1cc920faa941931151a0b540c2c97801b257554fed88e01bf045aaa25e4a

File Explorer

be9c1cc920faa941931151a0b540c2c97801b257554fed88e01bf045aaa25e4a

.exe 6.4MB

be9c1cc920faa941931151a0b540c2c97801b257554fed88e01bf045aaa25e4a

IMPHASH 9eb9157fe335589b72298b9163707d16
SHA256 be9c1cc920faa941931151a0b540c2c97801b257554fed88e01bf045aaa25e4a
MD5 a1dc618824ac4844ee8a4b3070742878
SHA1 4ea80e3fbf1d2f4141c9468c0c10a9d6b6449249
SHA512 4820e5132f73eccf26604b53b9c1750da00d62ef7806b84ed70d73b77da22c629e72bcd3b6a0ac68189c50a0983eeecae294dbbbcc3466b7655d41a24a35c906
SSDEEP 98304:JUws86vJkSfT5PhHtYbUDyrhe632vspERaM3Kw:Cv86X5Hyf2vs6RaAK
TLSH
T157669F23B341943FC11B07358967C6742535AE602B3A9A3767F87D1E3F7A281392E687
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3745576

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

sndPlaySoundW mciSendCommandW timeGetTime mciGetErrorStringW

oleacc

LresultFromObject

shlwapi

PathIsRelativeW ord142

winspool.drv

DocumentPropertiesW ClosePrinter OpenPrinterW GetDefaultPrinterW EnumPrintersW

comdlg32

FindTextW ChooseFontW ChooseColorW GetSaveFileNameW GetOpenFileNameW

comctl32

FlatSB_SetScrollInfo InitCommonControls ImageList_DragMove ImageList_Destroy _TrackMouseEvent ImageList_DragShowNolock ImageList_Add ImageList_GetDragImage FlatSB_SetScrollProp ImageList_Create ImageList_EndDrag ImageList_DrawEx ImageList_SetImageCount FlatSB_GetScrollPos FlatSB_SetScrollPos InitializeFlatSB FlatSB_GetScrollInfo ImageList_Write ImageList_DrawIndirect ImageList_SetBkColor ImageList_GetBkColor ImageList_BeginDrag ImageList_GetIcon ImageList_Replace ImageList_GetImageCount ImageList_DragEnter ImageList_GetIconSize ImageList_SetIconSize ImageList_Read ImageList_DragLeave ImageList_Draw ImageList_Remove ImageList_ReplaceIcon ImageList_SetOverlayImage

shell32

DragFinish SHGetDesktopFolder DragQueryFileW IsUserAnAdmin DragAcceptFiles Shell_NotifyIconW SHAppBarMessage ShellExecuteW

user32

CopyImage MoveWindow SetMenuItemInfoW GetMenuItemInfoW DefFrameProcW SetCaretPos GetCaretPos ScrollWindowEx GetDlgCtrlID FrameRect RegisterClipboardFormatW GetMenuStringW FillRect ClipCursor SendMessageA IsClipboardFormatAvailable EnumWindows ShowOwnedPopups GetClassInfoW GetScrollRange SetActiveWindow GetActiveWindow DrawEdge GetKeyboardLayoutList LoadBitmapW EnumChildWindows GetScrollBarInfo UnhookWindowsHookEx SetCapture GetCapture CreatePopupMenu ShowCaret GetMenuItemID DestroyCaret CharLowerBuffW PostMessageW SetWindowLongW IsZoomed SetParent DrawMenuBar GetClientRect IsChild SendDlgItemMessageW IsIconic ShowWindow SetForegroundWindow GetWindowTextW GetAsyncKeyState IsDialogMessageW DestroyWindow RegisterClassW EndMenu CharNextW GetFocus GetDC SetFocus ReleaseDC GetClassLongW SetScrollRange DrawTextW PeekMessageA MessageBeep SetClassLongW LockWindowUpdate RemovePropW GetSubMenu DestroyCursor IsWindowVisible GetMenuBarInfo PtInRect DispatchMessageA UnregisterClassW GetTopWindow SendMessageW GetMessageTime NotifyWinEvent GetComboBoxInfo CreateMenu LoadStringW CharLowerW SetWindowRgn SetWindowPos GetMenuItemCount GetSysColorBrush GetWindowDC DrawTextExW EnumClipboardFormats ScrollDC GetScrollInfo SetWindowTextW GetMessageExtraInfo GetSysColor EnableScrollBar TrackPopupMenu keybd_event DrawIconEx GetClassNameW GetMessagePos GetIconInfo SetScrollInfo GetKeyNameTextW GetDesktopWindow SetCursorPos GetCursorPos SetMenu GetMenuState GetMenu SetRect GetKeyState IsRectEmpty CreateIconFromResourceEx ValidateRect IsCharAlphaW GetCursor KillTimer BeginDeferWindowPos WaitMessage TranslateMDISysAccel GetWindowPlacement GetClipboardFormatNameW CreateIconIndirect GetMenuItemRect CreateWindowExW ChildWindowFromPoint GetDCEx PeekMessageW MonitorFromWindow GetUpdateRect SetTimer WindowFromPoint BeginPaint DrawStateW RegisterClipboardFormatW MapVirtualKeyW OffsetRect IsWindowUnicode DispatchMessageW DefMDIChildProcW GetSystemMenu SetScrollPos GetScrollPos InflateRect DrawFocusRect ReleaseCapture LoadCursorW ScrollWindow GetLastActivePopup GetCursorInfo SetMenuInfo GetSystemMetrics CharUpperBuffW ClientToScreen SetClipboardData GetClipboardData SetWindowPlacement GetMonitorInfoW CheckMenuItem CharUpperW DefWindowProcW MapDialogRect GetForegroundWindow ToAscii EnableWindow GetWindowThreadProcessId RedrawWindow EndPaint MsgWaitForMultipleObjectsEx LoadKeyboardLayoutW ActivateKeyboardLayout GetParent CreateCaret MonitorFromRect InsertMenuItemW GetPropW MessageBoxW SetPropW UpdateWindow MsgWaitForMultipleObjects DestroyMenu GetDoubleClickTime EmptyClipboard GetDlgItem AdjustWindowRectEx IsWindow DrawIcon EnumThreadWindows InvalidateRect SetKeyboardState GetKeyboardState ScreenToClient DrawFrameControl IsCharAlphaNumericW BringWindowToTop SetCursor CreateIcon RemoveMenu SubtractRect CreateDialogIndirectParamW GetKeyboardLayoutNameW OpenClipboard TranslateMessage MapWindowPoints EnumDisplayMonitors CallWindowProcW CountClipboardFormats CloseClipboard DestroyCursor PostQuitMessage ShowScrollBar LoadImageW EnableMenuItem DeferWindowPos HideCaret EndDeferWindowPos LoadMenuIndirectA FindWindowExW MonitorFromPoint LoadIconW SystemParametersInfoW GetWindow GetWindowLongW GetWindowRect InsertMenuW IsWindowEnabled IsDialogMessageA FindWindowW DeleteMenu GetKeyboardLayout

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

oleaut32

SafeArrayPutElement GetErrorInfo VariantInit VariantClear SysFreeString SafeArrayAccessData SysReAllocStringLen SafeArrayCreate SafeArrayGetElement SysAllocStringLen SafeArrayUnaccessData SafeArrayPtrOfIndex VariantCopy SafeArrayGetUBound SafeArrayGetLBound VariantCopyInd VariantChangeType

wtsapi32

WTSUnRegisterSessionNotification WTSRegisterSessionNotification

advapi32

RegSetValueExW RegEnumKeyExW RegFlushKey RegQueryValueExW RegDeleteKeyW RegCloseKey RegCreateKeyExW RegQueryInfoKeyW RegOpenKeyExW

msvcrt

memcpy memset

kernel32

GetFileTime SetFileTime GetACP CloseHandle LocalFree GetCurrentProcessId SizeofResource QueryPerformanceFrequency IsValidCodePage IsDebuggerPresent GetFullPathNameW VirtualFree GetProcessHeap ExitProcess HeapAlloc GetCPInfoExW GlobalSize RtlUnwind GetCPInfo EnumSystemLocalesW GetStdHandle GetModuleHandleW FreeLibrary HeapDestroy ReadFile GetLastError GetModuleFileNameW SetLastError GlobalAlloc GlobalUnlock FindResourceW CreateThread CompareStringW MapViewOfFile CreateMutexW LoadLibraryA ResetEvent MulDiv FreeResource GetVersion RaiseException MoveFileW GlobalAddAtomW FormatMessageW SwitchToThread GetExitCodeThread WriteConsoleW GetCurrentThread LoadLibraryExW LockResource GetCurrentThreadId UnhandledExceptionFilter VirtualQuery GlobalFindAtomW VirtualQueryEx GlobalFree Sleep EnterCriticalSection SetFilePointer LoadResource SuspendThread GetTickCount WritePrivateProfileStringW GetFileSize GetTempFileNameW GetStartupInfoW GlobalDeleteAtom GetFileAttributesW GetCurrentDirectoryW SetCurrentDirectoryW InitializeCriticalSection GetThreadPriority GetCurrentProcess SetThreadPriority GlobalLock VirtualAlloc GetTempPathW GetCommandLineW GetSystemInfo LeaveCriticalSection GetProcAddress ResumeThread GetVersionExW VerifyVersionInfoW HeapCreate LCMapStringW GetDiskFreeSpaceW VerSetConditionMask FindFirstFileW GetUserDefaultUILanguage UnmapViewOfFile GlobalHandle lstrlenW CompareStringA QueryPerformanceCounter SetEndOfFile lstrcmpW HeapFree WideCharToMultiByte FindClose MultiByteToWideChar LoadLibraryW SetEvent CreateFileW GetLocaleInfoW EnumResourceNamesW DeleteFileW FreeConsole GetLocalTime WaitForSingleObject WriteFile CreateFileMappingW ExitThread DeleteCriticalSection GetDateFormatW TlsGetValue SetErrorMode IsValidLocale TlsSetValue CreateDirectoryW GetSystemDefaultUILanguage EnumCalendarInfoW LocalAlloc RemoveDirectoryW CreateEventW GetPrivateProfileStringW WaitForMultipleObjectsEx GetThreadLocale SetThreadLocale

ole32

RevokeDragDrop CreateDataAdviseHolder CoCreateInstance OleGetClipboard ReleaseStgMedium OleSetClipboard RegisterDragDrop IsEqualGUID OleInitialize OleUninitialize CoInitialize DoDragDrop

combase

CoUninitialize CreateStreamOnHGlobal CoDisconnectObject CoTaskMemFree CoTaskMemAlloc StringFromCLSID

gdi32

Pie SetBkMode GetRandomRgn CreateCompatibleBitmap GetEnhMetaFileHeader RectVisible AngleArc TranslateCharsetInfo ResizePalette SetAbortProc SetTextColor GetTextColor StretchBlt RoundRect SelectClipRgn RestoreDC SetRectRgn GetTextMetricsW GetWindowOrgEx CreatePalette CreateDCW CreateICW CreatePen PolyBezierTo GetStockObject CreateSolidBrush Polygon MoveToEx PlayEnhMetaFile Ellipse StartPage GetBitmapBits StartDocW GetSystemPaletteEntries GetEnhMetaFileBits SetBitmapBits GetEnhMetaFilePaletteEntries CreatePenIndirect SetMapMode GetMapMode CreateFontIndirectW PolyBezier ExtCreatePen LPtoDP EndDoc GetObjectW GetCurrentObject GetWinMetaFileBits SetROP2 GetEnhMetaFileDescriptionW ArcTo Arc CreateRectRgnIndirect TextOutW SelectPalette ExcludeClipRect MaskBlt SetWindowOrgEx CreatePatternBrush EndPage DeleteEnhMetaFile Chord SetDIBits SetViewportOrgEx CreateRectRgn RealizePalette SetDIBColorTable GetDIBColorTable CreateBrushIndirect PatBlt SetEnhMetaFileBits Rectangle SaveDC DeleteDC BitBlt FrameRgn GetDeviceCaps GetTextExtentPoint32W GetClipBox Polyline IntersectClipRect CreateBitmap CombineRgn SetWinMetaFileBits CreateDIBitmap GetStretchBltMode CreateDIBSection SetStretchBltMode GetDIBits LineTo GetRgnBox EnumFontsW SetWindowExtEx CreateHalftonePalette SelectObject DeleteObject ExtFloodFill UnrealizeObject CopyEnhMetaFileW OffsetRgn SetBkColor GetBkColor CreateCompatibleDC GetBrushOrgEx GetCurrentPositionEx SetDCPenColor GetNearestPaletteIndex GetTextExtentPointW ExtTextOutW SetBrushOrgEx GetPixel GdiFlush SetViewportExtEx SetPixel PolyPolyline EnumFontFamiliesExW StretchDIBits GetPaletteEntries

Sharing

General

Malware Config

Signatures

File Explorer

be9c1cc920faa941931151a0b540c2c97801b257554fed88e01bf045aaa25e4a

winmm

oleacc

shlwapi

winspool.drv

comdlg32

comctl32

shell32

user32

version

oleaut32

wtsapi32

advapi32

msvcrt

kernel32

ole32

combase

gdi32

generic